$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cf7c8f4a-0827-444b-b6e4-9a45ca69f600.roa File: cf7c8f4a-0827-444b-b6e4-9a45ca69f600.roa (raw, json) Hash identifier: qWI61SzVkg/w1ymq561xxOhakqah+Elfuw6elrRabuY= Subject key identifier: E7:69:DA:35:10:DF:2B:8D:9F:DD:BC:7A:23:45:68:56:24:2E:4B:9E Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 660AAE41C608CE1331B6A0B42433B59AB11518D5 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cf7c8f4a-0827-444b-b6e4-9a45ca69f600.roa Signing time: Mon 31 Mar 2025 18:30:10 +0000 ROA not before: Mon 31 Mar 2025 18:30:10 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:0a:ae:41:c6:08:ce:13:31:b6:a0:b4:24:33:b5:9a:b1:15:18:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Mar 31 18:30:10 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:b4:a4:a1:f7:35:0d:54:31:41:e8:9d:d6: dc:1c:af:f2:a3:06:c1:a4:40:c0:dd:53:14:dc:4a: b0:81:93:7a:84:f3:c6:e1:45:7f:98:a7:7f:a3:53: 24:0f:74:3c:45:5d:00:57:ef:a8:35:c3:f5:9f:b0: b3:4e:5f:c8:13:42:21:21:d8:d0:34:ec:fd:4f:5e: 9f:61:f4:fe:bb:9f:2e:70:c3:5c:df:0a:3d:3e:04: 7d:c8:b9:94:74:43:37:fd:ae:45:fd:f4:54:e2:bb: f6:7b:b1:ad:6b:1f:0d:e3:b1:ff:dc:b3:89:d3:e3: 41:ac:0d:78:ce:d3:2e:08:02:2c:28:13:6a:b3:58: 69:c1:76:c9:b9:70:99:cc:da:2b:27:cb:93:3b:4e: 4c:66:37:24:34:de:a7:51:16:44:c7:9c:d9:a4:b0: 1a:97:98:1d:00:2b:e2:8a:ff:20:6c:09:2e:aa:61: 28:19:d0:89:5e:e7:5e:b9:c9:e1:8c:d8:34:a8:6c: ad:89:d3:fe:d6:a7:12:38:17:64:b8:fe:86:30:b9: 76:a8:44:63:81:c6:2c:7b:50:91:f2:fd:e1:70:11: c6:cb:82:74:ec:84:1e:4c:34:e4:56:54:40:4f:64: d4:91:cf:be:e0:84:ab:c2:62:e7:7f:c9:e1:95:25: a9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:69:DA:35:10:DF:2B:8D:9F:DD:BC:7A:23:45:68:56:24:2E:4B:9E X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cf7c8f4a-0827-444b-b6e4-9a45ca69f600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.9.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:21:13:97:03:51:5c:31:b2:97:0e:a9:82:5b:a5:b4:d5:ae: 17:81:4d:bc:33:59:76:b1:ac:c8:25:dc:dc:c2:e6:84:e3:2b: 43:37:8c:9a:6b:cd:cd:66:a8:14:e1:f0:a5:1a:d2:a9:e9:0e: 4a:13:ee:b6:e6:a1:ee:97:b6:d2:57:0e:aa:e7:9e:f8:ef:d4: 47:31:24:ef:a4:09:53:d0:8e:9b:1b:66:fe:d6:64:9d:06:52: 5e:1d:a9:1d:b5:fd:1c:cb:7d:bb:91:3f:fb:b6:a6:bf:18:fc: 7a:58:df:e5:08:7d:a5:b4:9c:f8:fe:28:67:66:7b:6b:57:6c: d7:c3:26:50:6c:29:57:b8:b0:6d:85:0e:b7:aa:58:17:4b:35: 30:dd:1f:06:68:3f:23:99:21:42:e8:02:0a:2a:8d:5a:33:18: 74:f3:22:07:61:9c:f0:31:90:a1:89:de:21:8c:d6:e0:ef:a5: 55:41:c4:0f:36:1a:c5:34:b3:3a:d7:a6:1d:f1:cb:de:ed:50: 73:c0:8d:86:16:58:8d:85:ae:7d:66:cb:d7:4e:48:1d:e6:47: 2f:81:56:ae:53:08:7d:24:3a:60:c5:ea:86:7d:3f:26:12:d8: 74:1d:67:be:11:f6:55:9f:54:25:82:e9:93:16:17:23:4d:d0: 9e:31:b2:60 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZgquQcYIzhMxtqC0JDO1mrEVGNUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwMzMxMTgzMDEwWhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTdhMThiMGZmMTQ3NmI5ZDM1NTQxYTc5MTZkZDkyZDM3 N2M4MjJhYTAyZTljMDJhN2Y3Y2JhZmZhZThlNTgxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxjrSkofc1DVQxQeid1twcr/KjBsGkQMDdUxTcSrCBk3qE 88bhRX+Yp3+jUyQPdDxFXQBX76g1w/WfsLNOX8gTQiEh2NA07P1PXp9h9P67ny5w w1zfCj0+BH3IuZR0Qzf9rkX99FTiu/Z7sa1rHw3jsf/cs4nT40GsDXjO0y4IAiwo E2qzWGnBdsm5cJnM2isny5M7TkxmNyQ03qdRFkTHnNmksBqXmB0AK+KK/yBsCS6q YSgZ0Ile5165yeGM2DSobK2J0/7WpxI4F2S4/oYwuXaoRGOBxix7UJHy/eFwEcbL gnTshB5MNORWVEBPZNSRz77ghKvCYud/yeGVJanxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU52naNRDfK42f3bx6I0VoViQuS54wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2NmN2M4ZjRhLTA4MjctNDQ0Yi1iNmU0LTlhNDVjYTY5ZjYwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAkwDQYJKoZIhvcNAQELBQADggEBABshE5cDUVwxspcOqYJbpbTVrheB TbwzWXaxrMgl3NzC5oTjK0M3jJprzc1mqBTh8KUa0qnpDkoT7rbmoe6XttJXDqrn nvjv1EcxJO+kCVPQjpsbZv7WZJ0GUl4dqR21/RzLfbuRP/u2pr8Y/HpY3+UIfaW0 nPj+KGdme2tXbNfDJlBsKVe4sG2FDreqWBdLNTDdHwZoPyOZIULoAgoqjVozGHTz IgdhnPAxkKGJ3iGM1uDvpVVBxA82GsU0szrXph3xy97tUHPAjYYWWI2Frn1my9dO SB3mRy+BVq5TCH0kOmDF6oZ9PyYS2HQdZ74R9lWfVCWC6ZMWFyNN0J4xsmA= -----END CERTIFICATE-----Generated at Sat Apr 5 19:13:03 2025 by rpki-client